Lucene search

K
osvGoogleOSV:USN-4720-1
HistoryFeb 02, 2021 - 6:06 p.m.

apport vulnerabilities

2021-02-0218:06:56
Google
osv.dev
9
apport
vulnerabilities
local attacker
privilege escalation
denial of service
cve-2021-25682
cve-2021-25683
cve-2021-25684
filesystem
arbitrary code

AI Score

7.6

Confidence

High

EPSS

0.001

Percentile

18.5%

Itai Greenhut discovered that Apport incorrectly parsed certain files in
the /proc filesystem. A local attacker could use this issue to escalate
privileges and run arbitrary code. (CVE-2021-25682, CVE-2021-25683)

Itai Greenhut discovered that Apport incorrectly handled opening certain
special files. A local attacker could possibly use this issue to cause
Apport to hang, resulting in a denial of service. (CVE-2021-25684)

AI Score

7.6

Confidence

High

EPSS

0.001

Percentile

18.5%